VU21991 - Implement Network Security Infrastructure for an Organisation - BZWD Canberra Case Study - IT Assessment Answer

Assessment Task:

VU21991: Implement Network Security Infrastructure for an Organisation IT Assessment Answer

Scenario: BZWD Canberra

Organizational Facts

BZWD - Blockchain Zeroday Worldwide Dataists is located in Canberra, with approximately 50 staff members analysing data for more than 500 clients Australia wide. The company’s main office is located in Canberra. The company has two branch offices in Melbourne and Sydney. BZWD stores and analyse data for its clients mainly from the following industries:

• Banking

• Ecommerce

• Hospitality

• Medical

Due to Cybersecurity threats, BZWD is interested in implementing network security infrastructure to meet their requirements.

Security Requirements

1. BZWD firewall appliances must secured by disabling unnecessary services and interfaces.

2. When an administrator performs a security-related action that affects company servers, the event must be logged. Logs must be saved. When possible, a second administrator must be able audit the event.

3. Only IT staff and support technicians at the BZWD are allowed to have administrative permissions on the network infrastructure security appliances.

4. All network security device administration must be conducted over an encrypted channel.

5. Access to DMZs from the WAN must be locked except HTTP, FTP, SSH and SMTP

6. Access to LAN (User network) from the DMZ and Internet must be blocked

7. IPS rules must be configured to detect and block port scanners in LAN (User Network)

8. IPS rules must configured to protect DMZ servers against DoS attacks

Remote access Requirements
1. The Sales staff needs to be able to access their customer data on their personal devices, from any location. This will allow them to review customer data while on the road. You must implement a feature that allows users to access their data from anywhere, and that supports a variety of corporate-owned and personal devices.

2. All staff from every office location (Canberra, Melbourne and Sydney) must connect securely by ensuring confidentiality, integrity of the data. Remote access VPNs may not be a scalable solution.

Project Task Requirements:
Step 1: Plan team member roles, and document your team for all the communications related to the project
Step 2: Write an Executive Summary for BZWD network security infrastructure project
Step 3: Document BZWD security requirements.
Step 4: Start Deployment. Inform the client (teacher) of any issues and document it
Step 5: Document all the references.

Deployment tasks
Document all the deployed tasks with explanations.You must present the practical solutions/ results with visible images captured and pasted into your document. You may demonstrate the deployment on your own VMs or Pentract – VU21991 Project LAB. Your deployment must include the following

1) Configure pfSense firewall with appropriate Zones as shown the topology (next page).

2) Secure pfSense Management access via HTTPs and SSH only.

3) Secure the pfSense Management access by implementing login protection on pfSense firewall

4) Stop all the unnecessary services on the pfSense firewall.

5) Create a non-admin user with the following privilege settings:

6) Configure NAT firewall rules to permit HTTP, FTP, SSH and SMTP access from WAN to DMZ Server

7) Configure Firewall rules to permit all traffic from LAN to DMZ Server

8) Configure Firewall Rules to deny all access from DMZ to Intranet

9) Configure IPS Rules to detect and deny port scanning from LAN network.

10) Configure Firewall and IPS device to forward all logs to SecruityOnion for analysis

11) Implement OpenVPN to allow Sales staff to access LAN servers.

12) Implement IPSec site-to-site VPN to allow remote sites to connect to HQ site securely.

This VU21991: IT Assessment has been solved by our IT experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.